You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by Apache Wiki <wi...@apache.org> on 2014/03/06 04:34:52 UTC
[Cordova Wiki] Update of "SetUpGpg" by AndrewGrieve
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Cordova Wiki" for change notification.
The "SetUpGpg" page has been changed by AndrewGrieve:
https://wiki.apache.org/cordova/SetUpGpg?action=diff&rev1=3&rev2=4
- = Creating a PGP key for Releases =
+ Moved to: https://github.com/apache/cordova-coho/blob/master/docs/setting-up-gpg.md
- {{{
- brew install gpg
- }}}
-
- How to create a key: http://www.apache.org/dev/openpgp.html#generate-key
- * email = you@apache.org
- * description = CODE SIGNING KEY
-
- Look at your keyring:
- {{{
- gpg --list-sigs --fingerprint
- }}}
- Example Output:
- {{{
- pub 4096R/8A496450 2014-02-27
- Key fingerprint = B998 A96C 4DAA 821A 9C3A FA5C E28E 332A 8A49 6450
- uid Andrew Grieve (CODE SIGNING KEY) <ag...@apache.org>
- sig 3 8A496450 2014-02-27 Andrew Grieve (CODE SIGNING KEY) <ag...@apache.org>
- sub 4096R/A59029E7 2014-02-27
- sig 8A496450 2014-02-27 Andrew Grieve (CODE SIGNING KEY) <ag...@apache.org>
- }}}
-
- In this example, `8A496450` is your `$KEY_ID`
-
-
- Publish to `cordova-coho/KEYS`:
- {{{
- cd cordova-coho
- gpg --armor --export $KEY_ID >> KEYS
- git commit -am "Added my signing PGP key to KEYS"
- git show
- }}}
-
- Then copy the update KEYS to `dist/`:
- {{{
- # Clone if you don't have it already:
- ./cordova-coho repo-clone -r dist
- cp cordova-coho/KEYS cordova-dist/KEYS
- # Make sure that's the only change to the file
- ( cd cordova-dist && svn diff )
- # Commit
- ( cd cordova-dist && svn commit )
- }}}
-
- Publish to `keys.gnupg.net`
- {{{
- gpg --send-keys $KEY_ID
- }}}
-
- Visit http://pgp.mit.edu/ and paste in result of:
- {{{
- gpg --armor --export $KEY_ID | pbcopy
- }}}
-
- Sign into: https://id.apache.org/ and add your fingerprint (not your KEY_ID):
-
- Copy to your Apache homedir:
- {{{
- gpg --armor --export $KEY_ID > $KEY_ID.asc
- scp $KEY_ID.asc people.apache.org:
- }}}
-
- Phew! That was easy :P
-
-
- = Importing PMC Members' PGP keys =
- {{{
- curl "https://people.apache.org/keys/group/cordova-pmc.asc" | gpg --import
- }}}
-
- Import any extra committer's keys via:
- {{{
- curl "https://git-wip-us.apache.org/repos/asf?p=cordova-coho.git;a=blob_plain;f=KEYS;hb=master" | gpg --import
- }}}
-